From 6f2dd2df0f4fd29e9eeba2df79785af2390a659b Mon Sep 17 00:00:00 2001 From: Patrik Lundin Date: Mon, 4 Nov 2024 09:30:39 +0100 Subject: [PATCH] Revert "Only bind certbot to machine-specific IP" Incorrectly applied to MQTT class, was supposed to be done for cache servers. This reverts commit b4261094a7649b520104d468e84daf89054c5b7f. --- global/overlay/etc/puppet/modules/cdn/manifests/mqtt.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/global/overlay/etc/puppet/modules/cdn/manifests/mqtt.pp b/global/overlay/etc/puppet/modules/cdn/manifests/mqtt.pp index 1d59e13..c34b323 100644 --- a/global/overlay/etc/puppet/modules/cdn/manifests/mqtt.pp +++ b/global/overlay/etc/puppet/modules/cdn/manifests/mqtt.pp @@ -50,7 +50,7 @@ class cdn::mqtt( content => file('cdn/mqtt/sunet-cdn-mqtt'), } - exec { "certbot certonly -n --email patlu@sunet.se --no-eff-email --agree-tos --standalone -d ${my_fqdn} --server ${acme_url[$environment]} --http-01-address ${facts['networking']['ip']}": + exec { "certbot certonly -n --email patlu@sunet.se --no-eff-email --agree-tos --standalone -d ${my_fqdn} --server ${acme_url[$environment]}": creates => "/etc/letsencrypt/live/${my_fqdn}/fullchain.pem" } }